Armis

Armis, the asset intelligence cybersecurity company ensures that organizations continuously see, protect and manage all critical assets. For detailed information, please refer to the Armis’s official documentation.

Integration Method: API

Tables: Detection Finding (2004), Device Inventory Info (5001)

The integration supports the following events.

This integration supports the following versions.

Prerequisites

• The user should have access to the Armis portal with an account that has the Global Administrator privileges. 

• The user should have access to the DataBee console.

Configuration Overview

1. Create an Secret Key.

2. Create Armis data feed in the DataBee console with the required Client credentials.

   DataBee Parameter	Armis Parameter
   Secret Key	Secret Key
   API URL(<instance>)	Rest Endpoint URL

Armis Configuration

1. Log on to Armis portal with an account that has the Administrator privileges.

2. Click on the Settings icon in the top right corner, then select Asset Management & Security Settings.
    

3. Capture the Instance for the Rest API Endpoint from the web URL.
    

4. Click on the API Management tab.
    

5. Inside the Generate Tokens section, if an API key has not been created, you will see a Create button. Click on it to generate a new API key.

   

6. Inside the Generate Tokens section, if an API key has already been created, you will see a Show button. Click on it to view the API key.
    

7. An “API Secret Key” pop-up will appear, allowing you to copy your API Secret key.
    

   Note:

   Copy the API Secret Key, as it will be required for further data source configuration. The Armis API Secret Key does not have an expiration date by default.

DataBee Configuration

1. Login to the DataBee UI, navigate to Data > Data Feeds and click the Add New Data Feed button.
    

2. Search for Armis and click it as shown below.
    

3. Click on the API Ingest option for collection method.

    

4. Enter feed contact information and click Next.
    

5. In the configuration page, confirm the following:

   • Authorization Method: Token URL Auth

   • Secret Key: paste Secret Key generated earlier in the Armis portal.

   • Token URL: replace <instance> from your Armis tenant information.

   • API URL: replace <instance> from your Armis tenant information.

   • Event Types: preselected for all the event types that integration pulls.

   

6. Click Submit.

Troubleshooting Tips

• If you encounter an Invalid or Unauthorized error, it may be due to incorrect credentials. Please double-check that the Secret Key is entered correctly. To avoid any issues, consider pasting it into a text editor to ensure there are no extra spaces or unexpected characters before reconfiguring the DataBee feed.